Artifact for ICSE NIER 2026 - Build Code is Still Code: Finding the Antidote for Pipeline Poisoning

Zenodo (CERN European Organization for Nuclear Research) 2026 Open access

Read full text
Authors: Brent Pappas, Paul Gazzillo
DOI: 10.5281/zenodo.18190621
Cited by: 0

Abstract

Foreman is a build system analyzer that checks that build phases follow developer-specified permissions. This helps developers detect pipeline poisoning vulnerabilities and attacks before they reach production code.

Publication details

Journal / source
Zenodo (CERN European Organization for Nuclear Research)
Publication date
8 January 2026